Lead information security technology analyst
Location: GB, , London
Employment type: Full-time
Required experience: Mid-Senior level
Required education: Bachelor's Degree
Industry: Computer & Network Security
Function: Information Technology

Company profile:
Digital Shadows is a cyber threat intelligence company that protects organisations from data loss and targeted cyber attack. By applying our award-winning blend of expertise and technology we enable organisations to exploit social, cloud and mobile technologies while keeping their security and reputations intact.For more information please contact careers[at]digitalshadows[dot]com (no recruiters please)

Job description:
Digital Shadows® runs a cyber monitoring managed service that secures its clients’ digital footprints.  We are an innovative, high-growth security technology start-up.  Having founded in May 2011 we are on an exciting journey.  We are currently based in Canary Wharf, London as part of the vibrant Level39 tech accelerator facility in One Canada Square.  We work with many of the largest financial institutions in the world and are expanding into other sectors.  We work with cutting edge technology in large-scale data processing and analytics.  Our unique technology helps our clients to address unique security challenges.  We’ve developed a technology platform that monitors for our clients leaking business-critical information.  The same platform also identifies criminal groups and organisations that threaten our clients.  Our analysts work with the system to alert our clients to these risks and help them to pre-empt or mitigate issues as they arise.We are looking for a bright, experienced, self-starting person to act as our lead infosec technology analyst.   This unusual and unique role will help develop our approach to the detection of fraud, crime and the use of malicious tools, tactics and procedures across the diverse range of online information sources that the company monitors.  This is a pivotal role providing liaison between the technology development team, the CTO and the analyst team.  We are looking for an individual with a natural curiosity whom is fluent in information and internet security, but also has extensive experience of technical information security research.  We believe that this would be an interesting role that would suit an experienced security testing or forensics professional.  The role provides an opportunity to contribute to a wide variety of tasks.  We have ambitious growth plans for 2014 and beyond and there is huge potential to develop with the role as the company grows, taking on more responsibility and building a long term career.Scope and scale of the roleWe are seeking a specialist information security technology researcher and analyst to lead in supporting our growing intelligence team.  This role provides essential support to our intelligence analysts in interpreting and researching online threats using the Digital Shadows Threat Searchlight platform.We are looking for an individual whom can bring to bear expertise in the security of Internet technologies to support our team of multi-lingual analysts in interpreting and managing technical threat information.The role will be varied and flexible and is expected to include the following primary activities: •    Use of Open Source Intelligence (OSINT) techniques to research the latest tools, tactics and capabilities of a range of online threat actors.  •    Conducting online forensic techniques to enhance the understanding of the WHO and WHY of online threats, helping to enrich and maintain profiles of groups that we are interested.•    Help leverage new data sources to provide relevant context to our clients alerts.•    To help characterise and monitor emergent trends and behaviours of online infrastructure used in attacks.•    Contribute ideas and designs for new features to be added to the Digital Shadows platform.•    To work with the information security research community at large to keep our work at the cutting edge.•    Configure new data acquisition and analysis strategies enhancing, the capabilities to align with our clients’ interests. •    Providing advice and recommendations to clients in response to specific risks.Because we are a small company you may be called on to leverage your expert skills against a range of tasks, for instance advising our sales team on the latest technical threat developments, or assisting our marketing specialists on how best to communicate our unique information security capabilities to potential clients. In all cases you will have the opportunity to make a meaningful difference to the company. You may be asked to work non-standard office hours depending on the level of support we need to provide for international clients so it would be useful if you are comfortable with this.

Requirements:
Skills and experienceThe successful candidate will have-    At least three years working in the information security industry.-    A bachelors degree in a numerate discipline, such as science, engineering, mathematics or computer science.-    A Masters or post graduate study in computer and network forensics, or information (cyber) security, or information assurance is desirable. The role will require an extensive experience and understanding of Internet technologies with one or more of the following topic areas:-    Experience of legal issues in Internet security, including investigations, privacy and communications security laws.-    An understanding of computer forensic procedures and the collection of evidence online.-    Exposure to online research tools such as Paterva’s Maltego, Palantir, i2, Wynyard and/or the research and enumeration tools in Kali Linux.-    A working understanding of the workings of major social networks such as Facebook, LinkedIn, VKontakte.-    Enterprise and Internet Search technologies (Apache Lucene, Solr and Tika).-    A basic working knowledge of malware forensic sandboxing and reverse engineering techniques such as Cuckoo sandboxes.-    Understanding of Internet networking protocols including the Domain Name System (DNS); TCP/IPv4&amp;6, UDP, TLS/SSL and common internet protocols.-    Network architecture, including firewall management, the role of various network components and how weaknesses may lead to vulnerabilities.-    Understanding of common security testing and research tools such as Metasploit, NMap, ZMap, Nessus, Qualys, -    A working understanding of Web Application Security Weaknesses (OWASP)-    An understanding of the basics of cryptography, steganography, encryption key management and Public Key Infrastructure.-    A working appreciation of email SMTP, Mail relays and the global email system, including spam, phishing and mail subversion techniques.

Benefits:
Remuneration - £negotiable based on experienceLocationYou will be based in the High Growth Space on the 42nd floor of One Canada Square, London (part of Level39): #URL_14cbf9f238dee7f3cdb4ada9dfb3c14327d853324a1dad74021d5ee819b62ed1##URL_7d65638631f2145f82045f47f8298d004d95d878300dfcfe193d97a6aa8ef67c##URL_eed1e60199beab11ee3137745a94f4e29dd7a926697cc56bfffdcf98359b705d#We are growing quickly and in mid-2014 we are moving into larger offices on Level 42 of One Canada Square.  We are also planning to open a US office in late 2014.ConfidentialitySome material will be commercially sensitive so there is a requirement to sign a confidentiality agreement and we may require you to go through a formal security vetting.For more information, please contact careers[at]digitalshadows[dot]com (no recruiters please)